dsh-auto-mode

Auto Mode for DeepSeek Harness: when enabled, every approval prompt is auto-accepted — operations that require approval (workspace-escape file writes, wider shell commands, sandbox escalations) run immediately without asking you. A persistent status chip above the composer shows the current mode and updates live.

English | 中文

Installation

One command (no build step — the plugin ships plain ESM):

dsh plugin --profile web add github:Igumi-BeXst/dsh-auto-mode

Then:

1. Move the bundle to the front of the list — edit ~/.dsh/profiles/web/package.json and put "dsh-auto-mode" first in dsh.profile.bundles (the add command appends it last). This ordering is what makes the approval listener register before the web UI answerer; without it, auto-grant does not work.
2. Restart dsh web and hard-refresh the page (Ctrl+Shift+R). The chip appears above the composer, aligned with the input card.
3. Click the chip to toggle. The switch is durable and survives restarts, and no chat message is produced.

Manual/local install: clone the repo, then dsh plugin --profile web add <path-to-clone> — same two follow-up steps.

Requirements: a web profile with the standard bundles (@deepseek-ai/dsh-base, @deepseek-ai/dsh-web-app), which provide the approval, settings, and webServer services the plugin uses.

Usage

• Click the chip above the composer to toggle Auto Mode for all sessions. The switch is durable (auto-mode settings namespace) and survives restarts. No chat message is produced — the chip itself is the only feedback.
• The chip polls /api/auto-mode/state every 3 seconds (plus window-focus refresh), so it reflects the mode within seconds of any toggle.
• Config default: dsh-auto-mode.enabled (default false).

How it works

The plugin registers the first approval/request waterfall listener on the host plane. When Auto Mode is on it claims every request with allowed-once — before the web UI answerer (registered later in the tree) can forward it to the browser. When off it delegates via next() and the normal approval flow applies.

The profile keeps this bundle first in dsh.profile.bundles so the row precedes the UI answerer row; without that ordering the browser prompt would claim requests first.

Safety invariant: sandbox escalations to danger-full-access are never auto-granted. Even while Auto Mode is on, those requests fall through to the interactive answerer, so the browser always asks you before any full-access upgrade. The model-facing prompt states the same rule as a positive instruction: when an operation genuinely needs that permission, request the escalation normally (with justification) — the approval prompt appears and you decide; the model must not abandon necessary operations because Auto Mode is on.

Safety

Auto Mode grants every request, including destructive ones. The runtime context warns the model to use extra care with irreversible or costly operations, and danger-full-access escalations always require your explicit approval — Auto Mode never bypasses that prompt. Click the chip to turn the mode off at any time.

Known limitations

• Hot-reload breaks auto-grant: this plugin must register its approval listener before the web UI answerer. A clean boot guarantees that (the profile keeps this bundle first). dev_reload_package re-registers the listener late, so after hot-reloading this plugin you must restart the web service for auto-grant to work again.
• Narration sentence suppressed by router-family plugins: the auto-mode:state runtime-context entry is cleared by plugins that wipe contexts on system-prompt/assemble (dsh-mode-boost and the router-standard preset do this by design). The composer status chip always shows the mode regardless; if you want the model to see it too, avoid mounting those plugins alongside this one.

License

MIT © Igumi-BeXst